Disable libpsl to fix dependency issue on buildbots

http://downloads.lede-project.org/snapshots/faillogs/arm_cortex-a9_neon/packages/wget/ssl/compile.txt

"...
Package wget is missing dependencies for the following libraries:
libpsl.so.5"

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Disable linkage to libunistring with a hack: advice configure
to use included libunistring when there is actually none.
This avoids libunistring detection in buildbot the the need
for dependency.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Fixes: CVE-2017-13089, CVE-2017-13090

switch to gz as there is no xz tarball for 1.19.2

Signed-off-by: Peter Wagner <tripolar@gmx.at>

revert the update as the new wget version links to libunistring
that is a rather large library. Better to revert the update now
in order to fix buildbot and then look into solutions.

signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

wget 1.91.1 configure script tries to link libunistring
if that is found. That lib is rather large and is not that
essential for normal operations, so instead of depending
on that, try to avoid linking it.

Revert an upstream commit that removed the clearance of
libunistring data in case IRI is explicitly disabled
(like we have it).

Reference to upstream commits:
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=00ae9b4ee2caa6640776e9777e7ef5a374d082c0
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=990f3d67d340d226bbd4187f5d310a4d2bf2bfe4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Update wget to 1.19.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Russell Senior <russell@personaltelco.net>

postrm/postinst symlink mangling is frowned upon
by trunk devs, in addition to packages modifying
the files as other packages during
installation/removal (without a agreed upon mechanism
for coordinating such changes) is prohibited in
most distros.

Further in this case results in wget-ssl failing to conflict
with wget-nossl.  As mentioned in the github issue
regarding this (https://github.com/openwrt/packages/issues/2728)
it is also unnessary in current openwrt/lede.

This patch there makes the symlink from the specific
flavour of wget (e.g. wget-ssl) from /usr/bin/wget part
of /install so that they conflict with each other the
way they should, and do not modify the same files
without a delibarate --force-overwrite.

Signed-off-by: Daniel Dickinson <lede@daniel.thecshore.com>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Update wget to version 1.17.1.
Remove patches as they are included upstream.

Changes in Wget 1.17.1
* Fix compile error when IPv6 is disabled or SSL is not present.
* Fix HSTS memory leak.
* Fix progress output in non-C locales.
* Fix SIGSEGV when -N and --content-disposition are used together.
* Add --check-certificate=quiet to tell wget to not print any warning
  about invalid certificates.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Upstream wget 1.17 compilation breaks with --disable-ipv6 configuration.
Backport an upstream commit that fixes the disabling of ipv6 in wget.
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=2cfcadf5e6d5c444765aa460915ae27109a8dbce

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

wget-nossl variant for wget 1.17 is broken in upstream.
Copy a patch from upstream mailing list to fix compilation.
http://lists.gnu.org/archive/html/bug-wget/2015-11/msg00074.html

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Update wget to 1.17.

Release notes: http://savannah.gnu.org/forum/forum.php?forum_id=8410

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

The update fixes CVE-2014-4877 which allows malicious FTP servers
to modify local filesystem contents through specificially crafted
symlinks.

Please backport to for-14.07 too.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>